Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
File: Te9bj_uvfVavXTny-UyUbXL3cPM.mft (raw, json)
Hash identifier: EVOFOXI1EIoiyJThtE4UZLpym41E2CoiMd8ECGuSUM8=
Subject key identifier: FF:4B:09:D2:E9:2E:1E:75:3D:8F:36:A9:0E:74:D3:2C:BB:80:38:1C
Authority key identifier: 4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
Certificate issuer: /CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Certificate serial: 0197B7459091E84313842BF51AC322D3242E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
Manifest number: 122D
Signing time: Sat 28 Jun 2025 16:01:18 +0000
Manifest this update: Sat 28 Jun 2025 16:01:18 +0000
Manifest next update: Sun 29 Jun 2025 16:01:18 +0000
Files and hashes: 1: C0P7fdeMbUq_SUkoUNzucceRO_o.roa (hash: IOK/1252dBZyKN3aeAn78pq+rzDgEYZNrHyoRwRIUaA=)
2: Te9bj_uvfVavXTny-UyUbXL3cPM.crl (hash: iIAMtr9iogBKHxZYH3d7INcU5e9A42uYnGoLUQEhepM=)
3: a1f2RcCwBt9bPHww1QitG1PQubM.roa (hash: SAUWVRAb+b0RAh7fSmAkBAsYks5uXo8G20Pv9xs5FYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:90:91:e8:43:13:84:2b:f5:1a:c3:22:d3:24:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Validity
Not Before: Jun 28 16:01:18 2025 GMT
Not After : Jun 29 16:01:18 2025 GMT
Subject: CN=ff4b09d2e92e1e753d8f36a90e74d32cbb80381c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:99:26:d1:8a:fb:de:db:aa:2e:ee:08:29:
86:c2:4a:72:81:d1:dd:5e:e4:13:7a:3a:5c:97:52:
d3:ac:70:68:a2:04:78:17:0f:fa:15:03:e5:27:c0:
a4:10:27:c2:b8:61:3c:93:f0:22:a1:72:79:f8:b3:
56:3c:52:fe:1b:c7:88:88:6b:35:03:c9:48:6a:6e:
26:8c:f3:3c:4e:40:9f:2e:2c:7d:02:2f:b4:4c:e7:
77:a6:cd:fd:40:c6:78:30:22:7d:3f:f9:e4:c6:b0:
a0:44:b4:c5:48:4b:27:b8:ba:4d:40:46:c2:10:90:
e9:38:37:1e:0f:df:62:54:91:9b:30:b8:14:8a:9d:
cf:81:6a:a6:0f:48:9f:59:91:da:b6:68:3b:7e:30:
bc:bf:f7:20:5e:df:3f:3a:d6:ec:d9:66:0f:81:b3:
f0:d9:55:dc:0b:b7:35:40:a4:c6:e9:02:eb:6f:91:
56:b0:f9:7e:7e:ef:23:47:2a:4b:ed:a7:3f:96:70:
7a:86:30:ef:2a:a3:0b:ef:5a:9e:4c:fc:63:17:f5:
9d:41:11:6c:3f:f3:f7:3d:57:82:a6:8b:3f:12:3a:
75:79:52:ef:25:56:de:18:ce:e2:78:8c:c7:6f:a8:
e6:8d:5e:52:1a:29:6c:db:2a:55:5f:06:e7:6d:ef:
88:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4B:09:D2:E9:2E:1E:75:3D:8F:36:A9:0E:74:D3:2C:BB:80:38:1C
X509v3 Authority Key Identifier:
keyid:4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4e:98:f5:ca:eb:b4:ec:19:2a:fb:af:46:e4:b6:e3:43:3d:
7e:b2:45:0f:16:52:ef:3a:20:16:80:b2:71:f8:38:04:39:e4:
aa:aa:bb:73:32:b7:af:54:a8:04:e9:f8:83:0b:eb:6b:5f:1d:
95:e7:e7:2c:0d:de:86:44:50:cb:e7:71:81:ad:8a:d1:c9:6b:
81:41:bd:0e:09:c5:57:44:0d:53:f3:33:c5:61:b8:b0:b1:8f:
88:df:f7:f3:6f:a7:07:8b:63:50:ce:cd:ae:40:c2:4a:9a:8c:
7c:74:36:fd:a3:8c:3a:bf:51:2c:ae:54:4e:37:64:58:b0:85:
2f:a0:b3:29:f1:f7:c2:89:61:3a:21:50:06:36:ec:57:da:ba:
1a:56:94:0f:a0:0a:33:26:c0:d2:2a:bd:a2:77:e1:8e:07:af:
7d:89:83:6b:47:60:3d:79:c6:91:ef:c5:b8:33:05:97:9e:5a:
bd:4b:32:28:fc:eb:bf:59:b6:c9:86:c5:e9:2c:13:ec:9c:de:
35:4d:f9:c1:45:31:27:52:68:6b:4e:31:7b:84:52:fe:e5:5d:
9a:56:57:ab:9e:ab:6f:f7:67:2e:d9:c2:e6:2e:33:5e:b1:d3:
fb:20:1f:e8:3f:21:12:69:e4:f0:8b:a6:ec:04:b7:b8:12:75:
97:92:5d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:10:57 2025 by rpki-client